Back to workflows

Evidence workflow

Collect evidence without creating privacy harm.

A workflow for keeping URLs, screenshots, archives, and notes in a reusable structure.

Passive and safe research workflow

When to use it

You have URL and want to check it through safe, legal, source-based research.

What you get

Clean evidence row and verification status.

Safety boundary

This workflow is not for exploitation, probing, or unauthorized scanning. It reads public records, records dates and uncertainty, and avoids turning signals into final claims.

Simple order

Work through the steps in order.

  1. Open an evidence row

    Record date, source name, URL, and short description.

    Check: The source can be found again.

  2. Add capture or archive

    Keep screenshot context or archive URL next to the source row.

    Check: A screenshot is not presented as the only proof.

  3. Separate finding and interpretation

    Write what is visible, what is inferred, and what is missing.

    Check: A reader can separate evidence from analysis.

  4. Reduce private data

    Remove or generalize unnecessary personal details.

    Check: Only needed information remains.

Report language

The evidence record keeps source, date, visible content, interpretation, and privacy limits separate.

Move to evidence notes

Sources

Start with these sources.

Open resource archive
  • Access Now Digital Security Helpline logo

    Access Now Digital Security Helpline

    OPSEC and researcher safety

    Use to protect the researcher, reduce exposure, and avoid unnecessary collection.

    Open source
  • Bellingcat Online Investigation Toolkit logo

    Bellingcat Online Investigation Toolkit

    Verification and fact-checking

    Use to separate claim, source, evidence, and interpretation.

    Open source
  • CISA Cybersecurity Best Practices logo

    CISA Cybersecurity Best Practices

    OPSEC and researcher safety

    Use to protect the researcher, reduce exposure, and avoid unnecessary collection.

    Open source
  • CISA Report Cyber Issues logo

    CISA Report Cyber Issues

    Reporting templates

    Use to keep evidence, interpretation, limits, and confidence separate.

    Open source
  • EFF Surveillance Self-Defense logo

    EFF Surveillance Self-Defense

    OPSEC and researcher safety

    Use to protect the researcher, reduce exposure, and avoid unnecessary collection.

    Open source
  • Freedom of the Press Foundation Training logo

    Freedom of the Press Foundation Training

    OPSEC and researcher safety

    Use to protect the researcher, reduce exposure, and avoid unnecessary collection.

    Open source